#fake-recruiter

Opening the project folder was enough

A company's paid take-home assignment arrived as a GitHub repository, and the repository executed a remote script the moment the folder was opened.